Lead Cloud Security Architect for Secrets Management Rollout

Cascade Apps

Contract · Remote · Flexible hours

About the role

Cascade Apps is modernizing its cloud delivery platform and needs a Cloud Security Architect to lead a test automation uplift that will cut regression risk before each product launch. You will design and embed security‑focused automated tests into the CI pipeline for the new "NimbusGuard" module.

Key responsibilities

• Architect end‑to‑end security test frameworks using Python, pytest‑security and AWS Security Hub APIs.
• Integrate automated vulnerability scans (Nessus, Trivy) into Jenkins pipelines for nightly builds.
• Define security baselines for IAM policies, S3 bucket encryption, and VPC flow logs, and enforce them via Terraform.
• Collaborate with DevSecOps engineers to embed secret‑management checks (HashiCorp Vault) into deployment scripts.
• Produce quarterly risk dashboards that surface regression trends and remediation timelines.
• Mentor the QA team on secure test case design and ensure coverage of OWASP Cloud Top 10.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty).
• Proven experience building automated security test suites in cloud environments.
• Strong knowledge of container security and Docker hardening.
• Hands‑on with IaC tools (Terraform, CloudFormation) and CI/CD platforms.
• Professional certifications such as AWS Certified Security – Specialty.

Nice to have

• Experience with serverless security testing (Lambda, API Gateway).
• Familiarity with compliance frameworks (PCI‑DSS, ISO 27001).